View Windows updates install date
Hi,
I am looking to extract some information from my client machines. The information is contained in the following regkey:
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install]
"LastSuccessTime"="2017-11-09 10:00:23"
"LastError"=dword:00000000
the info I am after is the LastSuccessTime, I would like to have it as a column on the "all computers" main screen, this way I can sort in to order to see which machines haven't had a successful windows update from the WSUS server.
I have tried to create a reg profile but with no joy. Is it possible to do what I want to do?
0
Comments
Steve,
To get the data that you want you need to use an scan profile with the Registry Scanner and use
SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Detect\LastSuccessTime
However their isn't a way to add the column to the main screen and you must use an report to get the results for all machines.
Thanks, I have created the scan profile, see below
Problem is I don't really know what to do with this next, I have tried to run a report but if I am being honest I am a bit lost. it's probably the part of all the PDQ tools that baffles me the most. any help appreciated
What OS are you targeting here? I'm trying to configure this in my environment to put something together for you, but my Windows 10 1703 machines don't seem to have that registry path? I have no Results Subkey!
Hi,
It is windows 7 mainly. It will be nice to figure this out as I use the registry a lot and if I can run reports on the registry it will help me to diagnose problems all over.
So basically you want a report that says:
ComputerName LastSuccessTime
SomeComputer 11/15/2017.....
yeah. that's correct
Roger that. So, I used a different key so I could get some data, but this is what the report would look like:
You can then configure the filters for the results however you need too.
Thanks for your help. I must be doing something wrong though as I copied your new report but i am not sure how to tie that in with the scan profile that i created to show the reg key that i am looking for.
Well, when you create the scan profile you need to make sure that you have scanned the targets you want with that Scan Profile. You can setup Triggers for the Scan Profile that does this automatically for you, and also link it to specific collections (by default a scan profile will scan All Computers).
Once you have Scanned a target with the scanner, you can open up the target, and go to Registry to see the data. Once you have data returned from a Scan Profile, you'll be able to report on it.
Here's a sample of the data I see returned from a success scan. I used a wildcard, so I got several values back, I just included a snippet.
I then simply said in the report "Use the Registry data, grab only the Value, and I changed the Title to something meaningful and easy to read, in this case "Last Success Date"
If you, like me, have more than one key/value pair returned, you could use a Filter on the report to limit the result set to only the data you need, or be more granular in your scan profile configuration.
I hope that helps clear things up a little bit.
Thanks mate, I am clearly doing something very wrong. mine doesn't show like that at all. could you export your report and scan profile (if possible) and upload it so I can take a look at how it is set up? think I may need to watch some more PDQ tutorials because I can't seem to get these reports working